Privacy Policy
Effective October 22, 2026
Insight Factory (인사이트팩토리), sole proprietorship, Republic of Korea (the “Company”) operates ‘The Little Mermaid's Voice’ at media.ifweb.kr in compliance with the Korean Personal Information Protection Act and related laws, and handles your personal data as described below.
1. What we collect and why
| Who | Data | Purpose |
|---|---|---|
| Singers (required) | Name or stage name, voice recordings, voice consent record (time of consent) | Producing the AI-sung song, assigning vocal parts, proof of consent |
| Buyer (required) | Email address, lyrics, mood description, song title, payment data (order number, amount and currency, payment key), country | Processing the order, delivery, revisions, payment confirmation and refunds |
| Buyer (optional) | Reference YouTube links, story for AI lyrics | Designing the song, drafting lyrics with AI |
| Shorts (optional) | Each singer's publishing consent, registered names | Posting the Short on our official YouTube channel |
| Automatic | IP address | Blocking excessive requests (processed in server memory only, never logged) |
Card numbers and other payment credentials are handled directly by the payment providers; we never receive them. We do not use voice recordings to identify anyone. They are used only to produce that order's song — never for other songs or to train AI models.
2. How long we keep it
| Data | Retention |
|---|---|
| Recordings and consent for unpaid sessions | Deleted automatically 48 hours after recording started |
| Original recordings for ordered songs | Deleted automatically 90 days after the last delivery (the revision period), or earlier on a singer's request |
| Full song and instrumental files, order details | Kept for re-delivery and revisions until the buyer asks us to delete them |
| Contract, payment and refund records | 5 years (payment and supply records) and 3 years (complaint and dispute records) under the Korean E-Commerce Act |
| Copies of emails we sent | 1 year, to confirm delivery and handle disputes |
3. Sharing with third parties
We do not provide your personal data to third parties. If every singer agrees to publish a Short, we post that 30-second video (the synthesized section, title, some lyrics and the singers' registered names) on our official YouTube channel, where it is publicly visible. Disclosures required by law through due process are an exception.
4. Processors and international transfers
| Recipient | Task | Data · location |
|---|---|---|
| Toss Payments Co., Ltd. | Payment processing and refunds (KRW and USD, once live payments start) | Order number, amount and currency, email, country · Republic of Korea |
| PayPal (PayPal Pte. Ltd. and affiliates) | Processing and refunds when you pay in USD with PayPal | Order number, amount, country, product name · Singapore, the United States and other PayPal locations; sent over HTTPS at payment; retained under PayPal's policies |
| Google LLC (YouTube) | Posting the Short (only if every singer agrees) | The Short and singers' registered names · the United States and other Google locations; retained until the post is taken down |
Original recordings and finished songs are stored only on servers we operate ourselves in the Republic of Korea and are never sent to external clouds or abroad. You can withdraw Shorts consent anytime under My Music: if not yet posted we won't post it, and if posted we take it down.
5. Deletion
Data is deleted without delay once its retention period ends or its purpose is fulfilled. Recordings and files are deleted irrecoverably, and scheduled deletions run automatically on our server.
6. Your rights
Buyers and singers may at any time request access to, correction, deletion or suspension of processing of their personal data, and may withdraw consent. Email devkain102@gmail.com with your order number; we will verify you against the email used for the order and act within 10 days. You may also act through a representative with proof of authorization. If you are in the EU/UK or another region with its own data protection law, you may also complain to your local supervisory authority.
7. Browser storage
Your in-progress order form and the keys to view your orders are stored in your browser's local storage on your device; clearing site data removes them. Recordings are never stored in the browser — they are sent straight to our server. We use no cookies, advertising or analytics tools.
8. Security
- Encryption in transit (HTTPS) everywhere
- Original recordings encrypted at rest; encryption keys readable only by the operator account
- Downloads only through signed links that expire after 7 days; the full song is never played on our site
- Automatic deletion of expired recordings
- Blocking of excessive requests and minimal staff access
9. Privacy officer
| Privacy officer | Chanseok Park (CEO) |
|---|---|
| devkain102@gmail.com |
10. Changes
This policy applies from October 22, 2026. We will announce changes on this page 7 days before they take effect.